1. Present situation Emile Bartolé CEN/WS XBRL: Improving transparency in financial and business reporting CWA2 Situation & latest evolutions 1CWA2

2. Objectives of CWA2 Dual objective of CWA2: standardize The way of submitting instances, a container with standardized Encryption Digital signature Compression … The way of transmitting the usual metadata that determine the context of an xbrl reporting instance the sender of the document contact details date and time of submission … Page 2CWA2

3. Submission container

4. Feedback containers

5. Standards used: Compression & Hash Zip as defined in http://www.pkware.com/documents/casestudies/APPNOTE.TXT SHA256 as defined in http://csrc.nist.gov/publications/fips/fips180-4/fips-180-4.pdf

6. Standards used: Digital signature The file structure generated by the signature SHALL be XAdES-BES/EPES http://uri.etsi.org/01903/v1.4.1/ using RSA with SHA512 http://www.w3.org/2001/04/xmldsig-more#rsa-sha512 implemented in accordance with http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2011:053:0066:0072:EN:PDF

7. Standards used: Encryption W3C Encryption http://www.w3.org/TR/xmlenc-core/ using key transport RSA-OAEP http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p and encrypting data with AES256. http://www.w3.org/2001/04/xmlenc#aes256-cbc

8. Requirements input EBA Easy to use, minimal model (1 instance per container) Senders identified in transport system, only encryption required (no digital signatures) Known people from NSAs, no need to identify them explicitely in a header EIOPA Minimal structural header Extensibility of header for content-based fields

9. Reserved extended suffix.signed.xml exclusively reserved for signed files.encrypted.xml exclusively reserved for encrypted files

10. File name change upon signature File to signName of the signed fileFilename inside the XML signature file LolLol.signed.xml Same as « File to sign » Lol.pdfLol.signed.xml Same as « File to sign » Lol.zipLol.signed.xml Same as « File to sign » Lol.signed.xml Same as « File to sign » Lol.encrypted.xmlLol.signed.xml Same as « File to sign »

11. Container.signed.xml Container.zip Sign with a first signature and replace extension header.xml file1.xbrl file2.xbrl file3.xbrl Compress Container.encrypted.xml Encrypt and replace extension Container.signed.xml Sign with a second signature and replace extension Filename in XML: Container.zip Filename in XML: Container.signed.xml Container creation example

12. Container.encrypted.xml Container.signed.xml Decrypt and extract file Container.signed.xml Validate first signature and extract file Container.zip Validate second signature and extract file header.xml file1.encrypted.xml file2.signed.xml file3.xbrl container.zip Uncompress Filename in XML: Container.zip Filename in XML: Container.signed.xml header.xml file1.xbrl file2.xbrl file3.xbrl container.zip header.xml file1.signed.xml file2.xbrl file3.xbrl container.zip Container reception example

13. Exchange files Header file - characteristics of the data files in the submission (caution: deprecated, not yet extensible version!) http://www.eurofiling.info/eu/fr/esrs/header Container feedback files - confirming (or not) the success of the reception of a submission container http://www.eurofiling.info/eu/fr/esrs/ContainerFeedback Instance feedback files - Result of the (XBRL-)validation of every submitted data file http://www.eurofiling.info/eu/fr/esrs/InstanceFeedback

14. Exchange model Subnission container Receiver encrypted (optional) signed (optional) Feedback container Sender Containerfeedback file Rest of the Feedback container encrypted (optional) signed (optional)

15. 2-level support: Forwarding Submission container 1 Reporting Entity header.xml nationalinstance1.xbrl nationalinstance2.xbrl Submission container 2 National Supervision Authority EuropeanSupervisionAuthority Response Container 1Response Container 2

16. 2-level support: Repackaging Reporting entity submission header.xml re1.xbrl re2.xbrl … ren.xbrl NSA submission National Supervision Authority EuropeanSupervisionAuthority Response REResponse NSA header.xml re1.xbrl re2.xbrl … ren.xbrl Reporting Entity

17. 2-level support: Regeneration Reporting entity submission header.xml re1.xbrl re2.xbrl … ren.xbrl NSA submission National Supervision Authority EuropeanSupervisionAuthority Response REResponse NSA header.xml nsa1.xbrl nsa2.xbrl … nsan.xbrl Reporting Entity

18. BasicHeader RegisteredOrganizationVocabulary ExtendedHeader OtherModule(s) Extensible Header

19. Use-cases provided by CWA2 Use-caseCharacteristics BasicHeaderOnly This header imports the BasicHeader « as is », makes no extensions of it and does not import the RegisteredOrganizationVocabulary as it uses none of its fields. Namespace: http://www.eurofiling.info/eu/fr/esrs/Header/BasicHeaderOnlyhttp://www.eurofiling.info/eu/fr/esrs/Header/BasicHeaderOnly XSD URL: http://www.eurofiling.info/eu/fr/esrs/Header/BasicHeaderOnly.xsdhttp://www.eurofiling.info/eu/fr/esrs/Header/BasicHeaderOnly.xsd XML sample instance URL: http://www.eurofiling.info/eu/fr/esrs/Header/BasicHeaderOnly.xmlhttp://www.eurofiling.info/eu/fr/esrs/Header/BasicHeaderOnly.xml StandardHeader WithRegOrg This header structure reflects the survey made within the Eurofiling BestPractices efforts which had given the results documented in http://www.wikixbrl.info/index.php?title=Best_Practices_on_Common_European_Reporting_Structures All fields related to « Transport » issues have been removed as these are out of scope of this CWA. Namespace: http://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithRegOrghttp://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithRegOrg XSD URL: http://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithRegOrg.xsdhttp://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithRegOrg.xsd XML sample instance URL: http://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithRegOrg.xmlhttp://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithRegOrg.xml StandardHeader WithoutRegOrg This header is (with regards to its function and its content) equivalent to the previous StandardHeaderWithRegOrg, but it does not import RegOrg and creates the missing fields as equivalent simple XML fields Namespace: http://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithoutRegOrghttp://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithoutRegOrg XSD URL: http://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithoutRegOrg.xsdhttp://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithoutRegOrg.xsd Sample instance URL: http://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithoutRegOrg.xmlhttp://www.eurofiling.info/eu/fr/esrs/Header/StandardHeaderWithoutRegOrg.xml NSA / ESA requiring something else Extend it according to your own needs !

20. Thanks for your attention Page 20 Comments or questions? emile.bartole@cssf.lu CWA2